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The following claims are presented for examination: 

1. (Currently Amended) A method comprising: 
receiving a proposed password from a user; 

performing . bv a search engine tool, an Internet search using a que r y 
containing one o r mo r e keywo r ds based on a keyword that is derived from the 
proposed password by using a s e a r ch e ngine too l ; and 

rejecting the proposed password when more than one [[web]] Web page retrieved 
by the search engine tool contain contains both : 
£jQ the proposed password and 

(in anoth er a string that is d e t e rm i n e d based on a rule for the selection of 
passwords. 

2. (Currently Amended) The method of claim 1, wherein: 
the proposed password comprises a telephone number; 

the search query comprises (i) a user name that is associated with the 
proposed password and fin the proposed password: and 
the string is an identifier of a person. 

whe r ein the r u l e eva l uates whethe r the p r opo s ed pa ss wo r d can be 
qua l itativ el y co rrel at e d with th e us er . 

3. (Previously Presented) The method of claim 1, wherein the rule evaluates 
whether the proposed password can be quantitatively correlated with the user. 

4. (Previously Presented) The method of claim 1, wherein the proposed password is 
comprised of a proposed answer and a proposed hint and wherein the rule evaluates 
whether the proposed answer can be correlated with the proposed hint in a particular 
relation. 

5. (Previously Presented) The method of claim 4, wherein the rule concerns a 
relation from the group consisting essentially of: self, family member, co-author, teammate, 
colleague, neighbor, community member or household member. 

6. (Previously Presented) The method of claim 1, wherein the proposed password is 
comprised of a proposed answer and a proposed hint and wherein the rule evaluates 
whether the proposed answer can be obtained from the proposed hint. 
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7. (Previously Presented) The method of claim 1, wherein the proposed password is 
an identifying number. 

8. (Previously Presented) The method of claim 7, wherein the rule evaluates 
whether the identifying number identifies a person in a particular relationship to the user. 

9. (Previously Presented) The method of claim 7, wherein the rule evaluates 
whether the identifying number is a top N most commonly used identifying number. 

10. (Previously Presented) The method of claim 7, wherein the rule evaluates 
whether the identifying number identifies a top N commercial entity. 

11. (Previously Presented) The method of claim 7, wherein the rule evaluates 
whether the identifying number identities the user. 

12. (Previously Presented) The method of claim 7, wherein the identifying number 
is a portion of a telephone number. 

13. (Previously Presented) The method of claim 7, wherein the identifying number 
is a portion of an address. 

14. (Previously Presented) The method of claim 7, wherein the identifying number 
is a portion of social security number. 

15. (Previously Presented) The method of claim 1, wherein the proposed password 
is a word. 

16. (Currently Amended) The method of claim 1 wherein the search engine tool 
retrieves a plurality of web pages. 15, wherein the r u l e cvo l uotcs o co rr e l otion 
between the wo r d and the u s e r. 

17. (Currently Amended) The method of claim 16 mil, wherein the proposed 
password is rejected based on a count of Web pages from the plurality that 
contain both the proposed password and the string whe r ein the sea r ch engine is a 
mcta sea r ch engine . 

18. (Canceled) 

19. (Currently Amended) The method of claim [[1]] 17, wherein the proposed 
password is rejected when the count exceeds a threshold that is greater than one- 
sea r ch engine emp l oys l oca l p r oximity techniques. 
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20. (Previously Presented) The method of claim 1, wherein the search engine 
employs a number classification, wherein the number classification identifies usage of one 
or more numbers found in a web page. 

21. (Currently Amended) An apparatus comprising: 
a memory; and 

at least one processor, coupled to the memory, operative to: 
receive a proposed password from a user; 

perform , by a search engine tool, an Internet search using a que r y containing 
based on one or more keywords derived from the proposed password , by using a sea r ch 
e ngin e too l; and 

reject the proposed password based on the number of web pages retrieved by the 
search engine tool that contain bothi 
£Q the proposed password and 

(in anoth er a string that is d e t er mined based on a rule for the selection of 
passwords[[,]]j. 

wherein the proposed password is rejected when the number of web pages retrieved 
by the search engine tool, that contain both the proposed password and the e*her string, 
exceeds a threshold[[,]]i and 

wherein the threshold is greater than one. 

22. (Currently Amended) The apparatus of claim 21, wherein: 
the proposed password comprises a telephone number: 

the search auerv comprises m a user name that is associated with the 
proposed password and (in the proposed password: and 
the string is an identifier of a person. 

whe r ein the r u l e eva l uate s whether the p r oposed passwo r d can be 
co rrel at e d with th e us er . 

23. (Previously Presented) The apparatus of claim 21, wherein the proposed 
password is comprised of a proposed answer and a proposed hint and wherein rule 
evaluates whether the proposed answer can be correlated with the proposed hint in a 
particular relation. 
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24. (Previously Presented) The apparatus of claim 21, wherein the proposed 
password is comprised of a proposed answer and a proposed hint and wherein the rule 
evaluates whether the proposed answer can be obtained from the proposed hint. 

25. (Currently Amended) The apparatus of claim [[21]] 22 wherein the search 
engine tool retrieves a plurality of Web pages. 

26. (Currently Amended) The apparatus of claim 25 wherein the proposed 
password is rejected based on a count of Web pages from the plurality that 
contain both the proposed password and the string. 25, whe r ein the r u l e 
eva l uates whethe r the identifying number identifies a pe r son in a pa r ticu l a r 
rel ationship to th e us er . 

27. (Previously Presented) An article of manufacture for evaluating a password 
proposed by a user, comprising a machine readable medium containing one or more 
programs which when executed implement the steps of: 

receive the proposed password from the user; and 

performing an Internet search using a query containing one or more keywords 
derived from the proposed password,-by using a search engine tool; and 

rejecting the proposed password based on the number of web pages retrieved by the 
search engine tool that contain both a the proposed password and another string that is 
determined based on a rule for the selection of passwords, wherein the proposed password 
is rejected when the number of web pages retrieved by the search engine tool, that contain 
both the proposed password and the other string, exceeds a threshold, and wherein the 
threshold is greater than one. 



